Skip to main content

Two-Step Authentication/2FA & How To Use It

Quick Intro​

Two-step authentication, also known as 2FA, adds an extra layer of security to your account. It requires a temporary one-time password from an app like Google Authenticator, available for both Android & iOS. This ensures that even if your password is compromised, unauthorized access to your account is still blocked.

Important To Know Before You Begin​

note

There are two primary ways to access your Web Control Panel:

  1. Via Client Area: Navigate to Client Area > Services, select your hosting service, and click Login To DirectAdmin. Note that you cannot use this method if you've changed the Web Control Panel's password or if 2FA is enabled.
  2. Direct Access: Use the login and password initially sent to your email upon purchasing the service plan. If you have changed your password, use the new one.

Remember, you cannot change your username, and you must log into the server where your account was created.

Enabling Two-Step Authentication​

To enable 2FA in your Web Control Panel:

  1. Navigate to Security Management > Two-Step Authentication.
  2. Click Generate Secret in the Secret section.
  3. Open your Authenticator App, enter the generated code or scan the QR code.
  4. Enter the 6-digit code into the Web Control Panel's QR Code section and click Test to ensure it works.
  5. Click Save to activate 2FA.
GIF

Scratch Codes - How To Create​

caution

Scratch Codes are one-time use backup codes that allow you to log in if you don't have access to your phone. They expire after one use. A set of multiple codes is provided upon creation, and you can generate new sets as needed.

To create Scratch Codes:

  1. Navigate to Security Management > Two-Step Authentication.
  2. Select the Scratch Codes tab.
  3. Click Add Codes to generate a new set.
GIF

Scratch Codes - How To Use It​

info

Scratch Codes can be used to log into the Web Control Panel when 2FA is enabled and you cannot access your phone. Use a Scratch Code in place of the Authenticator’s code to log in.

This guide ensures you can effectively manage access to your Web Control Panel with an added layer of security through two-step authentication, keeping your account secure even under potential threat scenarios.